diff --git a/docs/manual/admin/pam/security/change_secrets.en.md b/docs/manual/admin/pam/security/change_secrets.en.md index 1532ba8f..c2ddc934 100644 --- a/docs/manual/admin/pam/security/change_secrets.en.md +++ b/docs/manual/admin/pam/security/change_secrets.en.md @@ -6,7 +6,6 @@ - Click **Security Settings > Account Password Change** to open the **Account Password Change** page. - Account password change is designed to meet user security requirements by regularly or manually executing tasks to modify user passwords on assets. - The account password change task changes user passwords on assets using the privileged account of the asset **This operation requires a privileged account in the asset's account list**. - - Account password change currently does not support changing Windows domain account passwords. !!! warning "" - Since **modifying privileged user passwords** is a high-risk operation, JumpServer does not allow modifying privileged user passwords by default. The function to modify asset privileged account passwords is disabled by default and requires administrators to add the option `CHANGE_AUTH_PLAN_SECURE_MODE_ENABLED=false` in the configuration file and restart the bastion machine service to take effect. diff --git a/docs/manual/admin/pam/security/change_secrets.md b/docs/manual/admin/pam/security/change_secrets.md index 10e13a30..5c6682a2 100644 --- a/docs/manual/admin/pam/security/change_secrets.md +++ b/docs/manual/admin/pam/security/change_secrets.md @@ -5,7 +5,6 @@ - 进入 **PAM** 页面,点击 **安全设置 > 账号改密**,进入账号改密页面。 - 账号改密是为了满足用户的安全需求,定期或手动执行任务修改资产中的用户密码。 - 账号改密任务更改资产上的用户密码使用该资产的特权账号进行操作 **此操作需要资产的账号列表中有特权账号** 。 - - 账号改密目前不支持更改 Windows 域账号密码。 !!! warning "" - 由于 **修改特权用户的密码** 为高风险操作,所以 JumpServer 默认不允许修改特权用户的密码;修改资产的特权账号密码的功能默认不开启,需管理员用户在配置文件中添加选项 `CHANGE_AUTH_PLAN_SECURE_MODE_ENABLED=false` ,重启堡垒机服务后生效。